Archive
1 May 2023
Vulnerabilities first published on this day (UTC), newest first.
39 results · Feed
-
Low 2.5
Vault Enterprise Vulnerable to Padding Oracle Attacks When Using a CBC-based Encryption Mechanism with a HSM
HashiCorp Vault Enterprise 1.13.0 up to 1.13.1 is vulnerable to a padding oracle attack when using an HSM in conjunction with the CKM_AES_CBC_PAD or CKM_AES_CBC encryption mechanisms. An attacker with privileges to modify storage and restart Vault may be able…
-
Medium 5.3
Affected versions of Atlassian Confluence Server and Data Center allow anonymous remote attackers to view the names of …
-
Medium 6.3
SourceCodester Online DJ Management System GET Parameter view_details.php sql injection
A vulnerability was found in SourceCodester Online DJ Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /admin/bookings/view_details.php of the component GET Parameter Handler. The manipulation of the arg…
-
Critical 9.1
Apache StreamPark (incubating): Logic error causing any account reset
Apache StreamPark 1.0.0 before 2.0.0 When the user successfully logs in, to modify his profile, the username will be passed to the server-layer as a parameter, but not verified whether the user name is the currently logged user and whether the user is legal, …
-
Medium 6.2
A certificate validation vulnerability exists in the Baiying Android application which could lead to information disclo…
-
Medium 5.4
Apache StreamPark (incubating): LDAP Injection Vulnerability
Apache StreamPark 1.0.0 to 2.0.0 have a LDAP injection vulnerability. LDAP Injection is an attack used to exploit web based applications that construct LDAP statements based on user input. When an application fails to properly sanitize user input, it's possib…
-
High 7.0
A directory permissions management vulnerability in Lenovo System Update may allow elevation of privileges.
-
High 8.3
A valid, authenticated XCC user with read only access may gain elevated privileges through a specifically crafted API c…
-
Medium 6.3
A valid, authenticated user may be able to trigger a denial of service of the XCC web user interface or other undefined…
-
Medium 6.1
A potential security vulnerability has been identified in HPE ProLiant RL300 Gen11 Server. The vulnerability could resu…
-
Critical 9.8
Apache StreamPark (incubating): Upload any file to any directory
Streampark allows any users to upload a jar as application, but there is no mandatory verification of the uploaded file type, causing users to upload some high-risk files, and may upload them to any directory, Users of the affected versions should upgrade to …
-
High 8.8
A default password was reported in Lenovo Smart Clock Essential with Alexa Built In that could allow unauthorized devic…
-
Critical —
Remote file access vulnerability in `mlflow server` and `mlflow ui` CLIs
### Impact Users of the MLflow Open Source Project who are hosting the MLflow Model Registry using the ``mlflow server`` or ``mlflow ui`` commands using an MLflow version older than **MLflow 2.3.1** may be vulnerable to a remote file access exploit if they ar…
-
High 7.2
Spigot Command Exploit in Triton
Triton is a Minecraft plugin for Spigot and BungeeCord that helps you translate your Minecraft server. The CustomPayload packet allows you to execute commands on the spigot/bukkit console. When you enable bungee mode in the config it will enable the bungee br…
-
High 7.8
Use-after-free in Linux kernel's Performance Events subsystem
A use-after-free vulnerability in the Linux Kernel Performance Events system can be exploited to achieve local privilege escalation. The perf_group_detach function did not check the event's siblings' attach_state before calling add_event_to_groups(), but remo…
-
High 7.8
Use-after-free in Linux kernel's Performance Events subsystem
A use-after-free vulnerability in the Linux Kernel io_uring subsystem can be exploited to achieve local privilege escalation. Both io_install_fixed_file and its callers call fput in a file in case of an error, causing a reference underflow which leads to a us…
-
Low 2.4
Responsive Menus Configuration Setting responsive_menus.module responsive_menus_admin_form_submit cross site scripting
A vulnerability classified as problematic was found in Responsive Menus 7.x-1.x-dev on Drupal. Affected by this vulnerability is the function responsive_menus_admin_form_submit of the file responsive_menus.module of the component Configuration Setting Handler…
-
Medium 6.3
IP Blacklist Cloud Plugin CSV File Import ip_blacklist_cloud.php valid_js_identifier path traversal
A vulnerability, which was classified as critical, was found in IP Blacklist Cloud Plugin up to 3.42 on WordPress. This affects the function valid_js_identifier of the file ip_blacklist_cloud.php of the component CSV File Import. The manipulation of the argum…
-
Medium 5.4
Cross Site Scripting (XSS) vulnerability in PerfreeBlog 3.1.2 allows attackers to execute arbitrary code via the Post f…
-
Critical 9.8
File upload vulnerability in Antabot White-Jotter v0.2.2, allows remote attackers to execute malicious code via the fil…
-
Medium 6.1
editor.md vulnerable to Cross-site Scripting
Cross Site Scripting (XSS) vulnerability in pandao editor.md thru 1.5.0 allows attackers to inject arbitrary web script or HTML via crafted markdown text.
-
Medium 5.4
Cross site scripting (XSS) vulnerability in ZHENFENG13 My-Blog, allows attackers to inject arbitrary web script or HTML…
-
Medium 5.7
Cleartext Transmission in set-cookie:ecos_pw: Tenda N301 v6.0, Firmware v12.02.01.61_multi allows an authenticated atta…
-
Medium 5.4
Cross Site Scripting (XSS) vulnerability in WinterChenS my-site before commit 3f0423da6d5200c7a46e200da145c1f54ee18548,…
-
Medium 6.1
Cross Site Scripting (XSS) vulnerability in Qbian61 forum-java, allows attackers to inject arbitrary web script or HTML…
-
Medium 5.4
Cross site scripting (XSS) vulnerability in ZHENFENG13 My-Blog, allows attackers to inject arbitrary web script or HTML…
-
Medium 5.7
Cleartext Transmission in cookie:ecos_pw: in Tenda N301 v6.0, firmware v12.03.01.06_pt allows an authenticated attacker…
-
Medium 6.5CVE-2023-27035 Public exploit
An issue discovered in Obsidian Canvas 1.1.9 allows remote attackers to send desktop notifications, record user audio a…
-
Medium 5.3
An issue was discovered in KaiOS 3.0. The pre-installed Communications application exposes a Web Activity that returns …
-
High 7.1
Archer Platform 6.8 before 6.12 P6 HF1 (6.12.0.6.1) contains a stored XSS vulnerability. A remote authenticated malicio…
-
High 7.5
D-Link DIR-879 v105A1 is vulnerable to Authentication Bypass via phpcgi.
-
High 7.5
D-Link DIR-890L FW1.10 A1 is vulnerable to Authentication bypass.
-
Medium 4.9
A buffer overflow vulnerability in the Zyxel NBG-418N v2 firmware versions prior to V1.00(AARP.14)C0 could allow a remo…
-
Medium 6.5
A format string vulnerability in a binary of the Zyxel NBG-418N v2 firmware versions prior to V1.00(AARP.14)C0 could al…
-
High 8.8
The post-authentication command injection vulnerability in the Zyxel NBG6604 firmware version V1.01(ABIR.0)C0 could all…
-
High 7.5
A buffer overflow vulnerability in the Zyxel NBG-418N v2 firmware versions prior to V1.00(AARP.14)C0 could allow a remo…
-
High 7.5
A cross-site scripting (XSS) vulnerability in the Zyxel NBG-418N v2 firmware versions prior to V1.00(AARP.14)C0 could a…
-
Medium 6.5
An issue discovered in Konga 0.14.9 allows remote attackers to manipulate user accounts regardless of privilege via cra…
-
Critical 9.8
OpenText BizManager before 16.6.0.1 does not perform proper validation during the change-password operation. This allow…